Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Tom Bruce 122 posts 506 karma points
    May 08, 2018 @ 14:26
    Tom Bruce
    0

    Preventing the reuse of old passwords

    Hi everyone,

    How would you stop users from reusing old passwords? How can I find out the hashing algorithm?

    I need to compare their old passwords with their new password.

    Any help or pointers much appreciated.

  • Jeffrey Schoemaker 408 posts 2138 karma points MVP 8x c-trib
    May 09, 2018 @ 05:42
    Jeffrey Schoemaker
    0

    Hi Tom,

    it depends a bit on the version of the Umbraco and the settings in your web.config. Can you check for the field 'useLegacyEncoding' in your web.config and share that value (True/False).

    You can also take a look at this page: https://umbraco.com/products/umbraco-cms/security/ (scroll down to Backoffice security).

    Kind regards,

    Jeffrey

  • pranjal 75 posts 188 karma points
    May 09, 2018 @ 06:44
    pranjal
    0

    first of all check for property changepasswordManually to true after that just use change password method to change the user password and check user id by normal identity properties and methods pretty simple.

  • Tom Bruce 122 posts 506 karma points
    May 09, 2018 @ 12:21
    Tom Bruce
    0

    Hi Jeffrey,

    useLegacyEncoding= false

    Umbraco 7.6

    How can you compare old passwords with new ones, if the passwords have been salted, you can’t compare like for like!

Please Sign in or register to post replies

Write your reply to:

Draft